{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:S3EMQ2ZXPCES5VLSBEQHU3XHJ2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d12e4ac4be646011b7cab2a868ac41b825a203cbf3f3ee7fbc1d2f4f261e7552","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T11:44:46Z","title_canon_sha256":"dd59724b5015155fb82075a717847bda7990543e6d00f206779641bac9df6a42"},"schema_version":"1.0","source":{"id":"2502.06374","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.06374","created_at":"2026-07-05T10:20:43Z"},{"alias_kind":"arxiv_version","alias_value":"2502.06374v2","created_at":"2026-07-05T10:20:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.06374","created_at":"2026-07-05T10:20:43Z"},{"alias_kind":"pith_short_12","alias_value":"S3EMQ2ZXPCES","created_at":"2026-07-05T10:20:43Z"},{"alias_kind":"pith_short_16","alias_value":"S3EMQ2ZXPCES5VLS","created_at":"2026-07-05T10:20:43Z"},{"alias_kind":"pith_short_8","alias_value":"S3EMQ2ZX","created_at":"2026-07-05T10:20:43Z"}],"graph_snapshots":[{"event_id":"sha256:04a45481d00247b8642841a52642083d1f4e78c80fb952ca7ecb2854e6b4ef82","target":"graph","created_at":"2026-07-05T10:20:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.06374/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership Inference Attacks (MIAs) have emerged as a valuable framework for evaluating privacy leakage by machine learning models. Score-based MIAs are distinguished, in particular, by their ability to exploit the confidence scores that the model generates for particular inputs. Existing score-based MIAs implicitly assume that the adversary has access to the target model's hyperparameters, which can be used to train the shadow models for the attack. In this work, we demonstrate that the knowledge of target hyperparameters is not a prerequisite for MIA in the transfer learning setting. Based o","authors_text":"Antti Honkela, Gauri Pradhan, Joonas J\\\"alk\\\"o, Marlon Tobaben","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T11:44:46Z","title":"Hyperparameters in Score-Based Membership Inference Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.06374","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:67bd084b60e6e0c1a86862ed90b1c0fb9d4b10b7ee94b8d499178028e4cfcdea","target":"record","created_at":"2026-07-05T10:20:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d12e4ac4be646011b7cab2a868ac41b825a203cbf3f3ee7fbc1d2f4f261e7552","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-02-10T11:44:46Z","title_canon_sha256":"dd59724b5015155fb82075a717847bda7990543e6d00f206779641bac9df6a42"},"schema_version":"1.0","source":{"id":"2502.06374","kind":"arxiv","version":2}},"canonical_sha256":"96c8c86b3778892ed57209207a6ee74e9d1f4dd72c274b8d7b30d7ad0fcd3007","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"96c8c86b3778892ed57209207a6ee74e9d1f4dd72c274b8d7b30d7ad0fcd3007","first_computed_at":"2026-07-05T10:20:43.580400Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:20:43.580400Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Je97EKw+1NtT8NssJni5rT5W8tDbIXeGXlUFnju81BeYoX2ntFWgq6/IgDrlj88ACdp2nRVAFgnhiA7Wd28NBg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:20:43.581034Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.06374","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:67bd084b60e6e0c1a86862ed90b1c0fb9d4b10b7ee94b8d499178028e4cfcdea","sha256:04a45481d00247b8642841a52642083d1f4e78c80fb952ca7ecb2854e6b4ef82"],"state_sha256":"c82a16dc0a8ee2f0965ce07b216a6517713f6e28eefa065f6c967323e4629677"}